The OIG Office of Evaluation is initiating an evaluation of the U.S. Department of Housing and Urban Development’s (HUD) Public and Indian Housing (PIH) Information Technology (IT) Modernization program. The objectives are to assess the IT Modernization process for Enterprise Voucher Management System (EVMS) and Housing Information Portal (HIP) systems that support key PIH programs.

To assess the operational effectiveness of security controls for selected HUD IT systems or functions.

The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust...

HUD OIG is conducting the Fiscal Year (FY) 2025 evaluation of the HUD's information security (InfoSec) program and practices, as required by the Federal Information Security Modernization Act of 2014 (FISMA). The objectives are to (1) perform an independent evaluation of the effectiveness of HUD’s InfoSec program and practices as required by FISMA; (2) test the effectiveness of HUD’s InfoSec policies, procedures, and practices through...

The OIG evaluated the U.S. Department of Housing and Urban Development (HUD) Office of Housing’s (Housing) progress in applying zero trust security principles to protect personally identifiable information (PII) within the Federal Housing Administration (FHA) Catalyst system.HUD was in the beginning stages of implementing zero trust requirements for the data and identity pillars. HUD Office of Housing systems, including FHA Catalyst,...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to...

As of January 2024, 85 percent of HUD employees had approved telework agreements, and 9 percent had approved remote work agreements.  HUD estimated that 31 percent of remote employees were remote as a reasonable accommodation.  Most of HUD’s remote workers served in a limited number of occupations.  We evaluated the Office of the Chief Human Capital Officer’s (OCHCO) controls over the quality of data related to...

 The Geospatial Data of 2018 (the Act) governs the collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data of covered agencies, including the U.S. Department of Housing and Urban Development (HUD).  We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the geospatial data requirements stated in the Act.  The Act requires the Inspector...

The U.S. Department of Housing and Urban Development’s (HUD) Office of the Chief Human Capital Officer (OCHCO) and the Office of Departmental Equal Employment Opportunity (ODEEO) both have responsibilities related to increasing the percentage of employees who identify as Hispanic or Latino.  HUD provides an Annual Equal Employment Opportunity Program Status Report, also known as the Annual Management Directive 715 Report (MD-715...

The Office of Evaluation is initiating an evaluation of the timeliness of the Office of Departmental Equal Employment Opportunity's (ODEEO) equal employment opportunity (EEO) complaint-handling process between fiscal years (FY) 2017 and 2023. The evaluation will focus on ODEEO’s EEO investigations and final agency decisions from FY 2017-2023. The objectives for this evaluation are (1) to determine factors affecting the timeliness of...

The Office of Evaluation is initiating an evaluation of HUD’s utilization and oversight of its remote work and telework programs during the period April 25, 2022, to January 13, 2024. Our objectives are to assess: (1) HUD employees’ utilization of remote work and telework programs; (2) HUD’s administration of locality payments to its remote workers and teleworkers; and (3) HUD’s support and training of supervisors overseeing employee...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to...

Retention is a shared responsibility between the U.S. Department of Housing and Urban Development’s (HUD) Office of the Chief Human Capital Officer (OCHCO) and HUD’s other program offices.  OCHCO sets the departmentwide retention strategy, while the program offices have responsibility for managing retention within their offices.  Our evaluation determined that HUD’s departmentwide retention strategy in fiscal years (FY) 2019-...

HUD OIG is performing this evaluation to assess HUD’s capability to meet privacy and data protection requirements and provide appropriate stakeholders with an understanding of any related potential risks to HUD’s data and the operational mission. The evaluation will also provide HUD an independent assessment of the level of maturity it has reached in developing the data and identify pillars of CISA's zero-trust architecture. The...

HUD OIG is conducting the Fiscal Year (FY) 2024 evaluation of the HUD's information security program and practices, as required by the Federal Information Security Modernization Act of 2014 (FISMA). The objectives are to (1) assess the maturity level of HUD’s InfoSec program and practices based on the annual IG FISMA reporting metrics. The assessment will include 20 core IG metrics that are evaluated annually and group 2 of the...

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on...

The Office of Evaluation is initiating an evaluation of HUD’s recruitment efforts to address underrepresentation of employees who identify as Hispanic or Latino. Our objectives are to (1) determine the status of HUD’s recruitment plans to address the underrepresentation of employees who identify as Hispanic or Latino and (2) identify how HUD tracks the effectiveness of its recruitment actions to increase representation of employees who...

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced...

HUD OIG is conducting the Fiscal Year (FY) 2023 evaluation of the HUD's information security program and practices, as required by the Federal Information Security Modernization Act of 2014 (FISMA). The objectives are to (1) assess the maturity level of HUD’s IS programs and practices based on the annual IG FISMA reporting metrics. The assessment will include 20 core IG metrics that are evaluated annually and group 1 of the...

The Office of Evaluation is initiating an evaluation of HUD’s employee retention. Our objectives are to: 1. To determine whether HUD has a high voluntary separation rate relative to similar agencies, and which program offices or demographic groups, if any, have high rates relative to HUD’s overall rate or to equivalent groups in similar agencies. 2. To determine what retention-relevant programs HUD employs and the extent to which...